Skip to content
OpenAdvisories

Vendor

OpsTree Solutions

16 known vulnerabilities.

Products

BuildPiper 9 REMS 7
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-127073

    OpsTree BuildPiper before 2.7.0 Privilege Escalation via Additional Manifest

    OpsTree BuildPiper before 2.7.0 contains a privilege escalation vulnerability that allows project users to gain Kubernetes cluster-admin rights by submitting unrestricted manifests through the Additional Manifest feature. Attackers can deploy a ClusterRoleBin…

    OpsTree Solutions BuildPiper
  • Critical 9.1
    CVE-2026-127079

    OpsTree BuildPiper before 2.7.0 lacks rate limiting on password-reset OTP verification, allowing unauthenticated attack…

    OpsTree Solutions BuildPiper
  • Critical 9.9
    CVE-2026-127080

    OpsTree BuildPiper before 2.7.0 Container Escape via Unrestricted HostPath Volumes

    OpsTree BuildPiper before 2.7.0 contains an improper authorization vulnerability that allows authenticated deploy users to define arbitrary Kubernetes hostPath volumes without allow-list or policy checks. Attackers can set the host path to / in the Define Hos…

    OpsTree Solutions BuildPiper
  • Critical 9.8
    CVE-2026-126768

    OpsTree REMS through 1.0.0 Authentication Bypass via is_local_auth Flag

    OpsTree REMS through 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid JWTs by setting the client-controlled is_local_auth field. Attackers can send a POST /api/v1/user/login/ request for the admin acc…

    OpsTree Solutions REMS